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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1 . (Currently Amended) A network comprising: 

IPsec processing apparatuses, which use an IPsec (Internet Protocol security 
protocol) for encrypting and authenticating s e curing s e curity communications eft via the 
Internet between path in th e cas e wher e two different twe centers communicate via the 
Internet ; and 

an IPsec setting s e rver apparatus, which manages IPsec settings of the s aid 
IPsec processing apparatuses, 

wherein in response to receiving a request from a first IP processing apparatus 
to communicate with a second IPsec processing apparatus, the IPsec setting apparatus 
transmits a request to the second IPsec processing apparatus and upon receiving a reply to the 
request from the second IPsec processing apparatus the IPsec setting apparatus transmits a 
common encryption key to the first and second IPsec process apparatuses to be used to 
encrypt and authenticate IPsec communications between the first and second process 
apparatuses said IPsoc setting server apparatus includes m e ans for coll e ctiv e ly managing 
polici e s of said IPs e c to b e appli e d betw ee n first and s e cond IPs e c proc e ssing apparatus e s, 
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wh e r e in said IPs e c s e tting server apparatus includes m e ans for sp e cifying 
polici e s of said IPs e c to b e appli e d b e tw ee n said first and second IPsec processing 
apparatus e s based upon contents of a request message for communication b e twe e n said first 
and second IPsec processing apparatus e s r e c e iv e d from said first IPs e c processing apparatus . 

2. (Cancelled) 

3. (Currently Amended) The network according to of claim 1 , 

wherein said IPsec setting serv e r apparatus includes means for, upon r e c e iving 
the request m e ssag e , transmitting a requ e st startup m e ssag e to said the second IPsec 
processing apparatus , which is an opposit e party of communication of said first IPs e c 
processing apparatus which has transmitted the request message, in order to cause said second 
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IPsec proc e ssing apparatus to transmit transmits a request messag e for the communication 
message as a reply to the request received from the IPsec setting apparatus . 

4. (Currently Amended) The network according to of claim [[3]]J_, 

wherein when there is no response from the second IPsec to the request from 
the IPsec setting apparatus the s aid IPsec setting s e rver apparatus includes means for, when 
th e r e is no response to the requ e st startup m e ssag e , notifying said notifies the first EPsec 
processing apparatus that there is no response from said second IPsec processing apparatus. 

5. (Currently Amended) The network according to of claim 1 , 

wherein said IPsec setting s erv e r apparatus includes means for generating 
generates SA (Security Association) parameters., to be r e quir e d used in the IPsec 
communication between the first and the second IPsec processing apparatuses, fr om based on 
the contents of the request message and contents of the IPsec policies stored by the IPsec 
setting apparatus of said IPs e c to be appli e d to th e communication . 

6. (Currently Amended) The network according to o£claim 1 , 

wherein said IPsec setting s e rv e r apparatus includes means for s e nding sends a 
distribution message including at l e ast the policies of said IPsec and the SA parameters in 
response to the request message. 

7. (Currently Amended) The network according to of claim 1 , 

wherein said IPsec setting server apparatus includes m e ans for g e nerating a 
generates the common se cr e t encryption key to be used in encryption and authentication of 
the said IPsec communications between the first IPsec processing apparatus and the second 
IPsec processing apparatus and means for distributing transmits the generated common 
seefe tencryption key to the said IPsec processing apparatus. 

8. (Currently Amended) An IPsec setting s e rv e r apparatus managing 
IPsec setting of IPsec processing apparatuses, which use an IPsec (Internet Protocol security 
protocol) for securing security communication o h via the Internet path in th e case wh e r e 
between two different two centers communicat e via th e Int e rn e t , 
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wherein said IPsec setting server apparatus includ e s m e ans for coll e ctively 
managing manages IPsec policies of said IPsec to be applied among sad the IPsec processing 
apparatuses, and 

wherein said IPsec setting server apparatus includes m e ans for s p e cifying 
specifies the IPsec policies of said IPsec to be applied between an a first IPsec processing 
apparatus,, requesting communication with a second EPsec processing apparatus, and anoth e r 
the second IPsec processing apparatus based upon contents of a the request m e s s ag e to the 
EPsec setting apparatus from the first IPsec processing apparatus for communication between 
said with the second IPsec processing apparatus and anoth e r IPs e c proc e ssing apparatus 
r e c e ived from said IPs e c processing apparatus . 

9. (Cancelled) 

1 0. (Currently Amended) The IPsec setting server apparatus according to 

of claim 8, 

wherein said IPsec setting s e rv e r apparatus includ e s m e an s for, upon receiving 
the request message from the first IPsec processing apparatus , transmitting transmits a request 
startup message to an the second IPsec processing apparatus, which is an opposite party of 
communication of the firsta n EPsec processing apparatus which has transmitted the request 
message, in order to cause said the second IPsec processing apparatus of th e opposit e party of 
communication to transmit a request message for the communication. 

1 1 . (Currently Amended) The EPsec setting server apparatus according to 

of claim 10, 

wherein said the IPsec setting server apparatus includ e s m e ans for , when there 
is no response to the request startup message from the second EPsec processing apparatus , 
notifyin g notifies- said the first EPsec processing apparatus which has transmitted the request 
message that there is no response from said the second EPsec processing apparatus of the 
opposite party of communication. 

12. (Currently Amended) The IPsec setting s e rver apparatus according 

teof claim 8, 

wherein said EPsec setting sewer apparatus includ e s means for gen e rating 
generates SA (Security Association) parameters to be required used in the EPsec 
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communication between the first IPsec processing apparatus and the second IPsec processing 
apparatus# e*H - based upon the contents of the request message and contents of the IPsec 
policies of said stored by the IPsec setting apparatus to be applied to the communication . 

13. (Currently Amended) The IPsec setting s e rv e r apparatus according 

teof claim 8, 

wherein said IPsec setting serv e r apparatus includ e s m e ans for transmitting 
simultaneously transmits to the first IPsec processing apparatus and to the second IPsec 
processing apparatus a distribution message including at least the policies of said IPs e c and 
the SA parameters for IPsec communication between the first IPsec processing apparatus and 
the second IPsec processing apparatus in response to the request message. 

14. (Currently Amended) The IPsec setting s e rver apparatus according 

teof claim 8, 

wherein said IPsec setting s e rv e r apparatus includes m e ans for generating 
generates a common seere tencrypti on key to be used in encryption and authentication of said 
IPsec communication and a function for distributing distributes the generated common secret 
encryption key to said the first and second IPsec processing apparatus apparatuses . 

15. (Currently Amended) An IPsec processing apparatus using an IPsec 
(Internet Protocol security protocol) on the Internet, 

wherein said EPsec processing apparatus includ e s m e ans for, upon r e ceiving 
receives from an IPsec setting apparatus managing communication a packet to which said 
containing the IPsec should to be applied to communications with another IPsec processing 
apparatus , judging determines whether or not to inquire request from the IPsec setting 
apparatus a setting for said IPsec communication to be collectiv e ly manag e d in an EPs e c 
s e tting serv e r apparatus from said IPs e c s e tting server apparatus , and 

wherein said the IPsec processing apparatus includ e s means for transmitting 
transmits a reques t messag e for communication with anoth e r the other IPsec processing 
apparatus to said the IPsec setting serve r apparatus in order to acquire receive from the IPsec 
setting apparatus a setting for said IPsec communication . 

16. (Cancelled) 
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17. (Currently Amended) The IPsec processing apparatus according to of 

claim 15, 

wherein, upon receiving a request startup message from an IPsec setting 
apparatus for causing said the IPsec processing apparatus to transmit transmits the ^request 
for communication with another IPsec processing apparatus to the IPsec setting 
apparatus^ mossago from said IPsec setting servor apparatus, said IPsoc proce s sing apparatus 
transmits the requ e st m e s s ag e . 

18. (Currently Amended) The IPsec processing apparatus according to of 

claim 15, 

wherein said EPsec processing apparatus includes means for setting an SPD 
(Security Processing Database) , in which policies for applying said IPsec is recorded, and an 
SAD (Security Association Database) , in which an SA (security Association) necessary for 
subjecting an individual kind of communication to the IPsec p rocessing of said IPsec is 
stored , based upon a distribution message received from said the IPsec setting server 
apparatus. 

19. (Currently Amended) The IPsec processing apparatus according to of 

claim 15, 

wherein said IPsec processing apparatus includes moans for acquiring receives 
from the IPsec setting apparatus a common secre t encryption key to be used in encryption and 
authentication of said IPsec communication from s aid IPsec sotting server apparatus . 

20. (Currently Amended) The IPsec processing apparatus according to of 

claim 15, 

wherein said the IPsec processing apparatus includ e s m e ans for retransmitting 
retransmits the request m e ssage for communication to said the IPsec setting s e rver apparatus 
and acquiring receives new setting information before a term of validity e £for the SA expires. 

21 . (Currently Amended) An IPsec setting method for a network which 
comprise s comprising : 

receiving from a first IPsec processing apparatus a request for communication 
with a second IPsec processing apparatus; 
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in response to the received request, sending a request to the second IPsec 
processing apparatus, 

receiving a reply to the sent request from the second IPsec processing 

apparatus, 

in response to the reply from the second IPsec processing apparatus, retrieving 
IPsec policy rules from memory and generating IPsec settings parameters based on the 
content of the request from the first IPsec processing apparatus and the retrieved policy rules; 
and 

transmitting the generated IPsec settings to the first and second IPsec 
processing apparatuses 

IPsec processing apparatus e s, which us e an IPs e c (Int e rnet Protocol s e curity 
protocol) for securing s e curity on th e Int e rn e t path in th e ca se wh e r e differ e nt two c e nters 
communicat e via th e Int e rn e t; and an IPs e c setting s e rv e r apparatus, which manag es IPs e c 
s e ttings of said IPsec processing apparatus e s, 

wh e r e in said IPs e c setting serv e r apparatus includ e s a step of collectively 
managing policies of said IPsec to bo applied among said IPsec processing apparatuses, and 

wh e rein said IPsec setting s e rv e r apparatus includ e s a step of specifying 
policies of said IPs e c to be applied betw ee n an IPs e c proc e ssing apparatus and anoth e r IPsec 
processing apparatu s bas e d upon contents of a request messag e for communication b e tween 
s aid IPs e c processing apparatus and anoth e r IPs e c proces s ing apparatus rec e ived from said 
IPsec proc e ssing apparatus . 

22. (Cancelled) 

23. (Currently Amended) The IPsec setting method according to of claim 

21, 

wherein said IPs e c setting serv e r apparatus includes a step of, upon r e ceiving 
the request message, s e nding a the request sent to the second IPsec is a startup message to an 
IPsec proc e ssing apparatus, which is an opposite party of communication of an IPs e c 
processing apparatus which has transmitted the request message, in ord e r to caus e said IPs e c 
processing apparatus of th e opposit e party of communication to transmit and the reply 
received from the second IPsec is a request m e ssage for the communication. 
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24. (Currently Amended) The IPsec setting method according to of claim 

[[23]UL 

wherein said IPgcc s e tting server apparatus includ e s a step of, when there is no 
response reply to the request startup m e ssag e sent to the second IPsec processing apparatus , 
notifying said the first IPsec processing apparatus which has transmitt e d the r e quest message 
that there is no response from said the second IPsec processing apparatus of the opposit e party 
of communication . 

25 . (Currently Amended) The IPsec setting method according to of claim 

21, 

wherein said IPsec sotting server apparatu s includ e s a stop o f further including 
in response to a reply from the second EPsec processing apparatus, g enerating SA (Security 
Association) parameters to be r e quired used in the IPsec communication between the first and 
second IPsec processing apparatuses #em based on contents of the request from the first 
IPsec processing apparatus message and cont e nts of the retrieved polici e s policy ruleso f-said 
IPs e c to be applied to th e communication . 

26. (Currently Amended) The IPsec setting method according to of claim 

21, 

wherein said IPsec setting server apparatus includes a step o f further 
comprising transmitting a distribution message including at least the retrieved policies of said 
IPsec and the generated SA parameters in response to receiving the reques t m e ssage . 

27. (Currently Amended) The IPsec setting method according to of claim 

21, 

wh e r e in said IPsec setting server apparatus includ e s a stop o f further 
comprising, generating a common seere t encryption key to be used in encryption and 
authentication o f said IPsec communication between the first and second IPsec processing 
apparatuses and transmitting the generated encryption key to first and second IPsec 
processing apparatuses s and a st e p of distributing the genoratod common seeget key to r,nid 
IPs e c proc e ssing apparatus . 

28. (Currently Amended) The IPsec setting method according to of claim 

21, 
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Wher e in further comprising , upon receiving at one of the first and second IPsec 
processin g apparatuses a packet communication to which saM an IPsec should be applied, 
said theJPsec processing apparatus judg es determines whether or not to inquire request a an 
IPsec setting for said IPsec to bo collectively manag e d in an IPs e c setting server apparatus 
from said IPs e c setting server apparatus from an IPsec setting apparatus . 

29. (Currently Amended) The IPsec setting method according to of claim 

21, 

wherein said the first IPsec processing apparatus transmits a request message 
for communication with another the second IPsec processing apparatus to said an IPsec 
setting server apparatus in order to acquire a setting for said the IPsec to be used during the 
communication . 

30. (Currently Amended) The IPsec setting method according to of claim 

[[21]L26, 

wherein saki the IPsec processing apparatus apparatuses store the retrived 
policies transmitted in the distribution message in sete-an a respective SPD, and store the SA 
parameters transmitted in the distribution message in a respective in which polici e s for 
applying said IPs e c is r e corded, and an SAD , in which an SA (Security Association) 
necessary for subj e cting an individual kind of communication to proc e ssing of said IPsec, 
based upon a distribution m e ssage r e c e iv e d from said IPsec setting server apparatus . 

31. (Canceled). 

32. (Currently Amended) The IPsec setting method according to of claim 

21, 

wh e r e in said further comprising receiving a second request from the first IPsec 
processing apparatus for communication with the second IPsec processing apparatus before a 
term of the validity of an SA expires and in response generating and transmitting new IPsec 
setting to the first and second IPsec processing apparatuses resends the request message to 
said IPs e c s e tting server apparatus and acquires new setting information befor e a t e rm of 
validity of the SA expires . 
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